You don't need that for an A+. I suspect you've got a site hosted on S3 behind CloudFront, so you likely need a Lambda function to add the HSTS header. There are other security-related headers you can add, too.

You don't need that for an A+. I suspect you've got a site hosted on S3 behind CloudFront, so you likely need a Lambda function to add the HSTS header. There are other security-related headers you can add, too.